docker run -d \
  --name=openvpn-as \
  --device /dev/net/tun \
  --cap-add=MKNOD \
  --cap-add=NET_ADMIN \
  --cap-add=SYS_ADMIN \
  -p 943:943 \
  -p 443:443 \
  -p 9443:9443 \
  -p 1194:1194/udp \
  -v /opt/openvpn:/openvpn \
  --restart=unless-stopped \
  registry.cn-beijing.aliyuncs.com/zcun/open-as:v3 \
  /bin/sh -c "update-alternatives --set iptables /usr/sbin/iptables-legacy 2>/dev/null || true && \
             update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy 2>/dev/null || true && \
             exec /usr/local/openvpn_as/scripts/openvpnas --nodaemon"